ThreatHound : Tool That Help You On Your IR & Threat Hunting And CA

ThreatHound is a tool will help you on your IR & Threat Hunting & CA. just drop your event log file and anlayze the results. New Release Features: $ ThreatHound.exe -s ..\sigma_rules\ -p C:\Windows\System32\winevt\Logs\ -print no I’ve built the following: Features of the tool: To-do: installiton: $ git clone https://github.com/MazX0p/ThreatHound.git $ cd ThreatHound $ pip […]

March 12, 2023
Read More >>

Hack The Box: Mentor Machine Walkthrough – Medium Difficulty

In this post, I would like to share a walkthrough of the Mentor Machine from Hack the Box This room will be considered a medium machine on Hack the Box What will you gain from the Mentor machine? For the user flag, you will need to enumerate the new subdomain which is the API.mentorquotes.htb. We managed […]

The post Hack The Box: Mentor Machine Walkthrough – Medium Difficulty appeared first on Threatninja.net.

March 11, 2023
Read More >>

Recently discovered IceFire Ransomware now also targets Linux systems

The recently discovered Windows ransomware IceFire now also targets Linux enterprise networks in multiple sectors. SentinelLabs researchers discovered new Linux versions of the recently discovered IceFire ransomware that was employed in attacks against several media and entertainment organizations worldwide. The ransomware initially targeted only Windows-based systems, with a focus on technology companies. IceFire was first detected in […]

The post Recently discovered IceFire Ransomware now also targets Linux systems appeared first on Security Affairs.

March 9, 2023
Read More >>

Email-Vulnerablity-Checker : Find Email Spoofing Vulnerability Of Domains

Email Vulnerablity Checker v1.1.1 verifies whether the domain is vulnerable to spoofing by Email-vulnerablity-checker Features Usage: Clone the package by running: Step 1. Install Requirements # Update the package list and install dig for Debian-based Linux distribution sudo apt update sudo apt install dnsutils # Install dig for CentOS sudo yum install bind-utils # Install […]

March 8, 2023
Read More >>

Ubuntu Flavors Agree to Stop Using Flatpak

Phoronix reports:

While Ubuntu Linux hasn’t provided Flatpak support out-of-the-box due to their preference of using their own Snap app packaging/distribution format, Ubuntu flavors/spins have to this point been able to pre-install Flatpak support if …

February 25, 2023
Read More >>

Sandfly-Entropyscan : Entropy Scanner For Linux To Detect Packed / Encrypted Binaries Related To Malware

Sandfly-Entropyscan is an Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes. Sandfly-Entropyscan is a utility to quickly scan files or running processes and report on their entropy (measure of randomness) and if they are a Linux/Unix ELF type […]

February 25, 2023
Read More >>